|
Lines 237-243
Link Here
|
| 237 |
|
237 |
|
| 238 |
|
238 |
|
| 239 |
//fwd vendor-length |
239 |
//fwd vendor-length |
| 240 |
((int*) packet)++; |
240 |
packet += sizeof(int); |
| 241 |
len -= sizeof(int); |
241 |
len -= sizeof(int); |
| 242 |
if (comment->vendor_length > len) return 0; |
242 |
if (comment->vendor_length > len) return 0; |
| 243 |
|
243 |
|
|
Lines 258-264
Link Here
|
| 258 |
comment->comments = calloc(comment->comment_num, sizeof(int)); |
258 |
comment->comments = calloc(comment->comment_num, sizeof(int)); |
| 259 |
|
259 |
|
| 260 |
//fwd number of comments |
260 |
//fwd number of comments |
| 261 |
((int*) packet)++; |
261 |
packet += sizeof(int); |
| 262 |
len -= sizeof(int); |
262 |
len -= sizeof(int); |
| 263 |
if (comment->comment_num > 0 && len < sizeof(int)) return 0; |
263 |
if (comment->comment_num > 0 && len < sizeof(int)) return 0; |
| 264 |
|
264 |
|
|
Lines 268-274
Link Here
|
| 268 |
this_length = *(int*) packet; |
268 |
this_length = *(int*) packet; |
| 269 |
|
269 |
|
| 270 |
//fwd comment-length |
270 |
//fwd comment-length |
| 271 |
((int*) packet)++; |
271 |
packet += sizeof(int); |
| 272 |
len -= sizeof(int); |
272 |
len -= sizeof(int); |
| 273 |
if (len < this_length) return 0; |
273 |
if (len < this_length) return 0; |
| 274 |
|
274 |
|
